OWASP WebGoat Project Roadmap - Revision history

Bmayhew at 15:50, 4 January 2011

2011-01-04T15:50:36Z

Bmayhew at 19:50, 12 July 2008

2008-07-12T19:50:40Z

Arshan at 22:21, 18 June 2008

2008-06-18T22:21:34Z

Bmayhew at 20:19, 28 February 2008

2008-02-28T20:19:10Z

Bmayhew at 20:33, 8 October 2007

2007-10-08T20:33:53Z

Bmayhew at 14:00, 8 October 2007

2007-10-08T14:00:30Z

Jeff Williams at 01:48, 25 May 2006

2006-05-25T01:48:04Z

Jeff Williams at 02:19, 24 May 2006

2006-05-24T02:19:23Z

New page

The project's overall goal is to...

Mission statement here

In the near term, we are focused on the following tactical goals...

# one
# two
# three

Here are the current tasks defined to help us achieve these goals

* Gather existing presentations and email messages and pull ideas into OWASP

{{Template:Stub}}

[[Category:OWASP WebGoat Project]]

@@ Line 6: / Line 6: @@
 # Demonstrate most common web application security vulnerabilities
-# Increase ease-of-use and expand userbase
+# Add educational support for secure coding practices
 # Attract more contributions of lessons
 # Revisit existing lesson base to standardize lesson theme.
 Here are the current tasks defined to help us achieve these goals
 '''Architectural'''
-* Convert lessons to struts framework (Major effort)
+* Replace basic authentication with forms based authentication
 * Rewrite all lessons to follow common theme using common database
 * Rewrite user administration to allow better user management (non-hackable)
@@ Line 21: / Line 23: @@
 '''General'''
 * General security cleanup. Remove exploits that are not lesson specific
-* Denial of service lesson rewrite
+* Remove non working lessons
-* Bypass client side JavaScript lesson rewrite
 '''New Lessons'''
 * Server side forward allows access to WEB-INF resources
 * Account enumeration using webscarab
 * SQLException lesson - could tie into overall error handling
 * XML attacks - Entity recursion, ...

@@ Line 25: / Line 25: @@
 * Improve using an access control matrix lesson
 * Improve encoding basics lesson
 * Cross Site Trace (XST) only works in older browsers
 * Improve CSRF lesson

@@ Line 22: / Line 22: @@
 * General security cleanup. Remove exploits that are not lesson specific
 * Denial of service lesson rewrite
-* Bypass client side javascript lesson rewrite
+* Bypass client side JavaScript lesson rewrite
 * Improve using an access control matrix lesson
 * Improve encoding basics lesson
 * Improve thread safety lesson
-* Cross site trace only works in older browsers
+* Cross Site Trace (XST) only works in older browsers
 * Improve CSRF lesson

← Older revision		Revision as of 20:19, 28 February 2008
Line 1:		Line 1:
−	The project's overall goal is to...	+	<webgoat/>The project's overall goal is to...

	Be the defacto standard web application security training environment		Be the defacto standard web application security training environment

@@ Line 8: / Line 8: @@
 # Increase ease-of-use and expand userbase
 # Attract more contributions of lessons
 # Revisit existing lesson base to standardize lesson theme.

@@ Line 1: / Line 1: @@
 The project's overall goal is to...
-   Mission statement here
+   Be the defacto standard web application security training environment
 In the near term, we are focused on the following tactical goals...
-# one
+# Demonstrate most common web application security vulnerabilities
-# two
+# Increase ease-of-use and expand userbase
-# three
+# Attract more contributions of lessons
 Here are the current tasks defined to help us achieve these goals
-* Gather existing presentations and email messages and pull ideas into OWASP
+* one
 {{Template:Stub}}
 [[Category:OWASP WebGoat Project]]